Page 26 of 31 · 603 total questions.
A systems administrator is concerned users are accessing emails through a duplicate site that is not run by the company. Which of the following is used in this scenario?
The correct answer is A. Option A: Impersonation
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
A security engineer at a large company needs to enhance IAM in order to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?
The correct answer is B. Option B: Time-of-day restrictions This option keeps traffic private / properly secured as required.
A company wants to ensure employees are allowed to copy files from a virtual desktop during the workday but are restricted during non-working hours. Which of the following security measures should the company set up?
The correct answer is C. Option C: Time-based access control This option keeps traffic private / properly secured as required.
Employees sign an agreement that restricts specific activities when leaving the company. Violating the agreement can result in legal consequences. Which of the following agreements does this best describe?
The correct answer is C. Option C: NDA
A systems administrator just purchased multiple network devices. Which of the following should the systems administrator perform to prevent attackers from accessing the devices by using publicly available information?
The correct answer is C. Option C: Change default passwords.
A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this risk. Which of the following should the systems administrator perform?
The correct answer is B. Option B: Vulnerability scan
Explanation
A vulnerability scan identifies known weaknesses so remediation can be prioritized.
Which of the following activities uses OSINT?
The correct answer is A. Option A: Social engineering testing
Which of the following are the best security controls for controlling on-premises access? (Choose two.)
The correct answer is A, D. Option A: Swipe card Option D: Biometric scanner This option keeps traffic private / properly secured as required.
A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs. Which of the following risk elements should the implementation team understand before granting access to the application?
The correct answer is B. Option B: Appetite This option delivers the requirement at the lowest cost.
Which of the following is the act of proving to a customer that software developers are trained on secure coding?
The correct answer is D. Option D: Attestation This option keeps traffic private / properly secured as required.
An administrator is creating a secure method for a contractor to access a test environment. Which of the following would provide the contractor with the best access to the test environment?
The correct answer is B. Option B: Jump server This option keeps traffic private / properly secured as required.
A security analyst notices unusual behavior on the network. The IDS on the network was not able to detect the activities. Which of the following should the security analyst use to help the IDS detect such attacks in the future?
The correct answer is A. Option A: Signatures
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity. This option keeps traffic private / properly secured as required.
To which of the following security categories does an EDR solution belong?
The correct answer is D. Option D: Technical This option keeps traffic private / properly secured as required.
A company relies on open-source software libraries to build the software used by its customers. Which of the following vulnerability types would be the most difficult to remediate due to the company’s reliance on open-source libraries?
The correct answer is D. Option D: Zero-day
An organization has a new regulatory requirement to implement corrective controls on a financial system. Which of the following is the most likely reason for the new requirement?
The correct answer is B. Option B: To ensure that errors are not passed to other systems
Which of the following is the stage in an investigating when forensic images are obtained?
The correct answer is A. Option A: Acquisition
Which of the following describes the difference between encryption and hashing?
The correct answer is B. Option B: Encryption replaces cleartext with ciphertext, while hashing calculates a checksum.
Explanation
Hashing produces a one-way digest used to verify integrity without exposing the original value. Encryption protects confidentiality by making data unreadable without the appropriate key. This option keeps traffic private / properly secured as required.
A security report shows that during a two-week test period, 80% of employees unwittingly disclosed their SSO credentials when accessing an external website. The organization purposely created the website to simulate a cost-free password complexity test. Which of the following would best help reduce the number of visits to similar websites in the future?
The correct answer is B. Option B: Introduce a campaign to recognize phishing attempts.
Explanation
Phishing uses deceptive communication to obtain credentials, money, or execution of malicious content. This option keeps traffic private / properly secured as required.
A Chief Information Security Officer (CISO) has developed information security policies that relate to the software development methodology. Which of the following would the CISO most likely include in the organization’s documentation?
The correct answer is A. Option A: Peer review requirements This option keeps traffic private / properly secured as required.
An organization is developing a security program that conveys the responsibilities associated with the general operation of systems and software within the organization. Which of the following documents would most likely communicate these expectations?
The correct answer is C. Option C: Acceptable use policy This option keeps traffic private / properly secured as required.
Showing questions 501–520 of 603 · Page 26 of 31